Occupation
Digital Forensics Analysts
Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.
O*NET 31.0 · 15-1299.06
A typical week, in the words of people in the job
- 01Duplicate digital evidence to use for data recovery and analysis procedures.
- 02Preserve and maintain digital forensic evidence for analysis.
- 03Adhere to legal policies and procedures related to handling digital media.
- 04Write reports, sign affidavits, or give depositions for legal proceedings.
- 05Perform forensic investigations of operating or file systems.
- 06Create system images or capture network settings from information technology environments to preserve as evidence.
- 07Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy.
- 08Write technical summaries to report findings.
- 09Perform file signature analysis to verify files on storage media or discover potential hidden files.
- 10Recover data or decrypt seized data.
- 11Develop plans for investigating alleged computer crimes, violations, or suspicious activity.
- 12Analyze log files or other digital information to identify the perpetrators of network intrusions.
Task statements ranked by how many workers report them · O*NET 31.0
What the posting will be called
Titles reported by employers for this occupation. Search job boards with these, not the O*NET name.
Knowledge the job leans on
Skills that carry over from service